Provided by: debian-goodies_0.59_all bug


       checkrestart - check which processes need to be restarted after an upgrade


       checkrestart [ -hvpa ]


       The checkrestart program tries to determine if there are processes in the system that need
       to be restarted after a system upgrade. This is necessary since an  upgrade  will  usually
       bring  new  system libraries and running processes will be still using the old versions of
       the libraries. In stable Debian GNU/Linux systems this is typically needed to eliminate  a
       system  exposure  to  a  vulnerability  which might have been fixed by upgrading a library
       which that process makes use of.

       Consequently, checkrestart is sometimes used as an audit tool to find outdated versions of
       libraries  in  use,  particularly  after  security  upgrades.  Administrators  should not,
       however, rely on its output completely (see BUGS below).

       This script needs to run as root in order to obtain the information it needs for analysis.


              Show the program help and exit.

              Generate detailed output. This output includes the  list  of  all  processes  found
              using  deleted  files  or  descriptors as well as the deleted files and descriptors

              Only process deleted files that belong to a package, ignoring deleted  files  which
              do not have an associated package in the package system.

              Process  all  deleted  files regardless of location. This makes the program analyse
              deleted files even  if  they  would  be  discarded  because  they  are  located  in
              locations,  such as /tmp , which are known to produce false positives. It will take
              preceded if used simultaneously with the -p option.


       The program will exit with error (1) if a non-root user tries to  run  it.  Otherwise,  it
       will always exit with error status 0.


       This  program  might fail if the output of the lsof utility changes since it depends on it
       to detect which deleted files are used by processes.  It  might  also  output  some  false
       positives  depending  on  the  processes'  behaviour  since  it  does not check yet if the
       (deleted) files in use are really libraries.

       If you find a false positive in checkrestart please provide the following information when
       submitting a bug report:

       —      The output of checkrestart using the -v (verbose) option.

       —      The output of running the following command as root:

               lsof | egrep 'delete|DEL|path inode'

       Checkrestart  is  also sensitive to the kernel version in use. And might fail to work with
       newer (or older) versions.

       A rewrite to make it less dependent on lsof could improve this, however.




       checkrestart was written by Matt Zimmerman for the Debian GNU/Linux distribution.


       Copyright (C) 2001 Matt Zimmerman <>  Copyright  (C)  2007,2010-2011  Javier
       Fernandez-Sanguino <>

       This program is free software; you can redistribute it and/or modify it under the terms of
       the GNU General Public License as  published  by  the  Free  Software  Foundation;  either
       version 2, or (at your option) any later version.

       On   Debian  systems,  a  copy  of  the  GNU  General  Public  License  may  be  found  in